Senior Application Security Engineer

Job Summary

Joining the Information Security team, the full-time Senior Application Security Engineer will secure the platform throughout the software development lifecycle by defining secure coding practices, performing application security testing, and collaborating with engineering teams on security design and architecture, all while working remotely.

Key responsibilities

• Perform manual and automated application security testing to identify vulnerabilities across the platform
• Conduct code analysis and evaluate the software development lifecycle to enhance application security
• Design and maintain custom security testing tools and provide mentorship to junior security team members

Required qualifications

• Bachelor's degree in Computer Science, Engineering, or a related field with 8+ years of relevant experience, or a Master's degree with 3+ years, or an Associate degree with 12+ years of experience
• 3+ years of hands-on experience in threat modeling and translating findings into actionable remediation guidance
• Experience writing and reviewing C# and .NET code, including secure coding practices
• Hands-on experience performing penetration testing of web applications
• Industry-recognized offensive security or penetration testing certifications are preferred